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Introduction 



A problem which has developed into one of considerable importance 
and interest is that of accounting for the improvement or upgrading of 
reliability through corrective action on an item or system. This problem 
arises in the development stage when failures are relatively frequent and 
various failure modes, observed through design inspection or testing, 
can be removed. Whether corrective action takes place through design 
changes or development modifications, it is common to assume that the 
action never decreases reliability and, at least occasionally, actually 
increases reliability, hence the term reliability growth. Generally 
speaking, the mathematical models developed for this problem concern 
two objectives: (1) the prediction, before testing is initiated, of the 

reliability that should be attained at various stages of development; and 
(2) the estimation of reliability as a function of one or more parameters 
from test data. In general, the latter objective is attained by making 
statistical inferences from observed test data, while the former is 
gained through the use of probabilistic models using certain assumptions 
concerning the failure modes and the repair policy. 

This paper concerns the exposition, in a uniform setting, of several 
prediction models appearing in the literature and incorporation of some 
general features into them. We therefore begin with a brief review of 
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these models. 




h 







A 



Lloyd and Lipow [2] consider a system assumed to contain a 
single failure mode. A testing program is carried out for the purpose 
of discovering and removing the failure mode. On each trial, the 
system fails with (known) probability q (i. e. , the system has reli- 
ability 1 - q ) if the failure mode has not been corrected; otherwise, 
it has reliability 1 . On each trial resulting in a failure, an attempt 
is made to permanently repair the failure mode. It is assumed that 
on each such attempt the probability 0 of succeeding is known. 

Thus, in the model of Lloyd and Lipow, the system is either in an 
unrepaired state or a repaired state after n tests have been performed. 
Using a difference equation for the probability that the device is in the 
unrepaired state after n tests, Lloyd and Lipow show that the reliability 
of the system for the n + 1 test is 1 - q (1 - q0 . 

Pollock [3] considers a similar system, in which the repair 
probability 0 is known, but the failure rate q"" of the "repaired" 
system is not necessarily zero (nor even less than q) , Under various 
assumptions concerning the distribution of failure occurrences (such as 
Poisson or Bernoulli) and whether q and q^ are known or have some 
known prior distribution. Pollock obtains the failure rate distributions 
at time t (in the continuous case) and the density of the failure proba- 
bility at the n + 1®^ trial (in the discrete case) . 

Weiss [5] considers a system possibly containing several failure 
modes, each with the same exponential failure distribution. It is assumed 
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that the failure modes present in the system are drawn from a popula- 
tion of potential failure modes. This allows some relief from the 
rather strict assumption that all failure modes have identically the 
same failure rate, in that a higher failure rate for a mode can be mod- 
eled roughly by a higher probability of the presence of that mode in the 
system. The mean time to failure of the system is increased through 
removal of observed failure modes. 

Finally, Wolman [6] considers a system in which failures are of 
two types, which we shall call "inherent" and "assignable cause" fol- 
lowing the terminology of Barlow and Scheuer [ 1] . Each trial may 
result in exactly one of the following: success, inherent failure, or 

assignable cause failure. It is assumed that the system originally 
contains k assignable cause failure modes, and once failure of such a 
mode is observed the mode is permanently repaired. On each trial, 
the remaining assignable cause failure modes each occur with known 
probability q. Under certain "independence" assumptions, Wolman 
shows how a Markov chain model can be used to obtain the reliability 
of the system after n trials have been made. 

The consideration of several assignable cause modes in the system 
makes it important to distinguish carefully between the observation of a 
failure and the repair of a mode. This is of importance, for example, 
in consistently modeling independence of failure modes. It is also of 
interest to consider various "repair policies" and their effect upon 
system reliability after n trials. 
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In what follows, we consider models encompassing the various 
features mentioned above. Since the computational difficulty in a 
particular application may be substantial, some effort is directed 
toward establishing several methods that can be used for finding the 
(predicted) reliability of the system after n trials. It should be kept 
in mind that, throughout the paper, the problem being considered is 
that of predicting, before testing is undertaken, what the reliability 
of the system will be after n trials or, from another point of view, 
predicting the number of trials required to attain a given reliability. 
Because of its simplicity, we begin with a discussion of a system with 
a single assignable cause mode, Lloyd and Lipow's model being a 
particular example (model I) . We then extend to a system with k 
assignable cause modes, assumed to be "equally likely" (model II) . 
Finally, a system with k non-equally likely modes is considered 
(model III) . 

The following notation conventions were found to be useful. 

(a) Empty sums (that is, summations in which the upper limit 
on the index is smaller than the lower limit) are taken to be zero. 

(b) Empty products are taken to be one. 

(c) In some conditional probability statements involving the out- 
come of a test, given a condition just prior to the test, no specific 
mention of this "timing" is made. Thus, for example, P (E j E) 
might denote the conditional probability that the system is in state E 
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immediately after a trial, given that it is in state E just prior to the 
trial. The context should make the meaning of such symbols clear. 
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2. Model I: A Single Assignable Cause Mode 



Suppose the system under consider ation contains two "failure 
modes", one associated with inherent failures and the other associated 
with assignable cause failures. (The "inherent failure mode" is im- 
agined to exist for ease of exposition. In particular, it may be taken 
to be that part of the system other than the assignable cause failure 
mode. ) Assume that on each trial the probability of an inherent 
failure is , and if the system is unrepaired and an inherent failure 
does not occur, the probability of an assignable cause failure is q; 
otherwise, the probability of an assignable cause failure is zero. If 
we let I denote the event "an inherent failure on the n^^ trial", 



n 



th 



A denote the event "an assignable cause failure on the n trial", 



n 



th 



and if we say that the system is in state 0 for the n trial if it is 



unrepaired after n - 1 trials (denoted by , while if re- 

^ ^ 0 , n » 1 

paired after n ^ 1 trials the system is in state 1 for the n^ trial 

(denoted by "E, , , the above assumptions can be stated for- 

1 , n “ 1 * 

mally as follows: 

for n=l,2,3,..., 



p[inA]=p[i|E^ 1 

*"n n ^ ‘'n' l,n-l=' 



= n-1 3 = % 



p [ I n 

^ n 



A ] 

n 




n - 1 



] 



0 




" ^0, n-1 3 



q 
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It follows that the conditional probability of an assignable cause failure 



1 - 

on the n*' trial, given the system is in state 0 , is 



P [ A I 1 = (1 ~ ) q 



Before considering a more general repair policy, we digress some- 
what to consider the relatively simple repair policy of Lloyd and Lipow; 
namely, the system is repaired at (i. e. , immediately after) the 
trial with probability 0 if an assignable cause failure occurs at the 
n trial; otherwise, it is repaired with probability zero . (This 
corresponds to the repair policy in which an attempt is made to re- 
pair the assignable cause failure mode each time it is observed to 
fail, these attempts being ’’identical”. ) 

Since the reliability of the system after n trials, , is given 
in this case by 



R 

n 



r p [ I , n A ^ I E, ] • p (E. ) 

^n+l n+1* i,n-^ x,n 

1=0 



P [ I n A ^ I E^ ] • P (E ) 

^n+1 n+1' Ojn-' 0,n 



+ (1 - P [I ^ U A ^ I E^ ] ) • P (E ) 

' ‘“n-hl n+l‘ l,n^' '0,n 



(1 -q„) (1 -q) „) + (1 -q„! d -P(Eo,„)) 



(1 -q^) <1 -q P(Eo,^) ) 



(11 
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it is of interest to determine P (E ) for n = 1 , Z, . . . . Lloyd 

0 , n 

and Lipow solve essentially the same problem by considering a differ- 
ence equation for P (E ) . An alternative is as follows. The one- 

0 , n 

step transition probability matrix this process is easily 

seen to be 






^0 ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ - 0 ) ] (1 - qQ ) ( 



j 



where 



= P [ E. , I E. ] 
ij ^j,n+ll i.n'* 



that is, is the probability that the system goes from state i to 

state j in one trial. The n-step transition probability matrix 






is thus given by 






(1 - g0)^ 1 - (1 - g<i>f 



where 



g = ( 1 - qQ ) q 
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This is easily established by observing that each main diagonal ele- 
ment in the product of the two upper triangular matrices is the product 
of the corresponding main diagonal elements from these matrices and 
that a product of stochastic matrices is stochastic. If the process 
starts in state 0 with probability and if 

6 = (So- ‘ - So' 

then 

3 ) - (P (E ) . 1 - P (E ) ) 

ij 0 , n 0 , n 

so 

P(Eo^ J -g0)" 

Substituting this in (1) yields the predicted reliability of the system 
after n trials, 

= (1 - q^) (1 - q 3^ ( 1 ~ g0)'' ) (2) 

Note that this reliability is conveniently expressed in a matrix product 
form by 



R 

n 



(p ) 

3 fpi.'- ) 

Aj 



/ ( i - q^ ) (1 - g) 

11 -q^! 



! 3 ) 
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The special case 



^0 " 



1 




0 



results in the expression for derived by Lloyd and Lipow. 

A more general repair policy that might be of interest in the 
present model is as follows. Suppose the probability that the assign - 
able cause failure mode is repaired at its u^*^ failure is bu .• 
u = 1 , 2 , . . . . Then 



P(E. = P[A & (ncrepazr)|E ] • P (E ) 

U,n n ’U,n-i U,n-1 



+ P [ A 1 • P (E^ \ 

^ nl 0,n-l 



n 



P (E^ 1 ^ r ^ t assignable cause failure 

* ^ U“ 1 



at trial I E. , 1 
^ 0 , n “ 1 



(1 " -t “ g) J 



Now 



P [u^^ assignable cause failure at n^^ trial j E^ ^ ^ ] 



= P [ u “ 1 assignable cause failure: s in n - 1 trials 






^n-lN u-i 

= Cu - 1 ; ® 
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Let 



s 

n 



n 






n 



u 



u^l 



(1 -b^) 



n = 1 , 2 , 



Then 



[=n + '* -sn 

where P (E^ ^ ) = Pq > probability the system starts in state C . 

It follows that 



P (E^ 



n 



) = 3, 



n 

n 

j=i 



'=j 



+ (1 - g) ) 



n = 0 , 1 



Thus, by ( 1) , 

n 

= (1 - q^) (1 - q Pq n (s + (1 - (1 - q^)q) ) ; n = 0, 1. 2, . . . (4) 

j = l ^ 

As an example, note that in the case where b = 0 , (4) reduces 

to the expression given in (2) , as should be the case. Suppose, for 

th 

another example, that a repair attempt is made only after the j 
assignable cause failure, with probability b of a successful repair. 

Then is given by (4) , where b^ = 0 for u j , b^ ~ b . In this 
case, = S n < j and l)®'^ Ll-g)*^ h 

for n s j . Then P (E^ n ^ " ^0 n< j , 
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n 



^ n . [* (1 ;; 

k-j 



k - j 



for n ^ j . Thus, for example, when n ^ j , 



n 



- (1 -q„)(l -q n [l -b( : Jg-'U -g) 

k = J ^ ^ 



k - j 
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3 . Model II: k Equally Likely Assignable Cause Modes 



We now consider the basic model of Wolman [6] in a seating 
similar to that of Model I in the preceding section, together with 
some alternatives and generalizations concerning repair policies, 
initial states of the system, and methods of computing R . It is 
hoped that the present approach clarifies the role of Wolman's 
’’independence’’ assumptions and corrects several typographical 
errors in a discussion of Wolman’s paper by George Weiss [4] . 

Suppose the system under consideration is composed of k 
assignable cause failure modes (hereafter called ’’type II” modes) 
and an inherent failure mode (called a ’’type I” mode), with a 
series hookup as depicted in Figure 1 . 



k type II modes 



fa ilur e 

probability: q 




0 



FIGURE I 
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Suppose ' I " denotes, as before, the event that an inherent 
n 

failure occurs on the n-^^ trial, while "A " denotes the event that 

n 

at least one assignable cause failure occurs on the n-h trial. We 
make the following assumptions; on a given trial {i. e. , for any n, 
n = 1 , 2 , ... ) , 



1 . 



P[I1=P[I nA]=q^ 
^ n ■ ^ n n ■* ^0 



(the inherent failure probability is constant), 

2. If the j type II mode is unrepaired prior to the n*-^ trial, 



P II fails I ] = 0 . 

P [ j II fails I ] = q = 1 - p 

(assignable cause failures in unrepaired type II modes are 
equally likely and may occur only if an inherent failure does 
not occur). 

3. The type II modes are independent in the sense that given 
that there are several type II modes which are unrepaired 
prior to a trial and given that an inherent failure does not 
occur on the trial, the probability that these type II modes 
all fail on the trial is the product of the corresponding 
probabilities q . 



We say that the system is in state i (i = C , 1 , . . . , k) for the 

n^^ trial if i type II modes have been (permanently) repaired after 

n - 1 trials. Let *'E. , denote the event that the system is in 

1 , n “ 1 
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state i, assumption (3) above implies that on the n^^ trial 




Let us first consider the repair policy which leads to Wolman's 
model. 

If, on a given trial, at least one type II mode fails, exactly 
one type II mode is repaired. 

Under this repair policy, it is relatively straightforward to 
compute R by any one of several approaches. These approaches 



have in common a consideration of the transition probabilities of 
the system. The k + 1 x k + 1 matrix of one -step transition proba- 
bilities has a simple form in the present case. In fact, on any trial, 
for i=0,l,2,...,k. 



n 






k - i 




( 5 ) 



P 





( 6 ^ 



15 - 



Thus 









qO+(l-qo)P 



k-1 



(i-qo)(i"P^"S 0 

qQ+^i-qQ^p^ ^ (i-qQ)(i-p^ 



. . 0 

. . 0 

. . 0 



... 1 

-I 



If 3 = ( Pp. » 3 1 > > • ’ • > P, ) Is the distribution of initial states of 

U X ^ 1C 

the system, that is, if 



3^ = P [ system starts in state i] ; i = 0 , 1 k 

/ n \ — 

then p (p_ ) is the distribution of states occupied by the system 

after n trials. The matrix form (3) of the reliability given in (1) is 
easily extended to the present case, so that the reliability after n 
trials is given by 



R„ = e (pj"* ) 



P 

k - 1 






\ 



(1 - q, 



(V) 
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( 

The determination of (p_ ) is not as simple in the present 

case as it was for Model I. Wolman considers an approach based upon 

( 1 ) 

a "spectral decomposition" of (p_ ) , as follows: the characteristic 

( 1 ) 

roots of the positive definite matrix (p.. ) are simply its diagonal 

elements, 



k “ i 

^ ^ ^ ; i = 0 , 1 , . . . , k 



Thus, if X is a k+lXk+1 matrix whose rows are linearly inde- 
pendent characteristic vectors of P and A is the diagonal matrix of 
corresponding X/s, then 

(p.'">) = X-‘ A" X . n = 1, 2, ... 

Thus, once X ^ and X have been determined (possibly more than a 
( 

routine task), (p..^ ) is easily computed for all n since 



A 



n 



n 



n 



0 

0 



0 0 



n 



An alternate approach to the determination of (p^! ) has been 
suggested by Weiss [ 4] , In this approach, the elements in each row 
of (p.. ') are computed through the use of certain generating functions. 
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We illustrate this method for the first row of . Let 

•ij 



Gp. (s) = I; s^' ’ se(C,l],iTC, k 

n =0 



Note that, since 



° 00 <=> " ^ Poo"'’ = 2 (=[qo + (1 -q,)p*‘]l 

n-C n=0 



n 



1 



m 

1 - ^ s 

^00 



Also, 



(n) (n •- 1) {1) 



(n-1) (1| 



Poi = Po,i-l • Pi-1, i+ Po; 'Pii = k (8) 



Thus, 



G„,(s) =: S s 

n ~0 



nr ( ri ^ 1 1 ( 1 ) 



LPo,i-l Pi-i.i ^ Poi 



( n " 1 ) i(l ) 
P ■ 






(1) "In (n’l {r ” n (n) 

Pi- 1 , i " 2 " Pc, i -1 * Pti ' 2 " Pci 

n =0 



P. y\ s G ^ (s) t s G 's. 

jL — 1 , i 0 , Ji> L''f. 



1 , 2 ,... , k 



Then 



r ' 1 i 'V (1) 

G . (s) I i “• p.. s S - p. - 

Ct L -J- -> 1-1,1 0 , 1 “ ji 



- IS - 



and 



Goi(s) = 



. G . fs) 

^ 1-1 ,1 0 , 1-1 

1 “ p . . s 
11 



^ P: 



( 1 ) 



i-^1 j i 



1 

1 - p.. s 
11 



1 -p. , s 

1-1 , 1-1 



i (1) (1) 

" Poi Pl2 



P: 



(i; 



i"l , i 



(1 - s) (1 - s5 ... (1 - p,'‘* s) 






(f s‘ n p. . ) 

V j“l . J J 



: 1 = 0 , 1 , . . . , k (9) 



n a - p. 

j=o 



(1) 



jj 



Using partial fractions, the second factor in (9) can be expressed as 



^PqO ^ 



n (p 
j=o 
j^o 



(1) 



00 






1 



P 



( 1 ) 



1 « 
^ “ Poo " 



11 



n (p 

j=C 



fi) 



11 






1 



1 « 

i-Pii = 



(pj‘')‘ 



1 

n 

j-o 



<P..- 

Xi 



a) 



n 



1 



1 « 
1 - p. . s 

11 



SO that 
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n ( n) 
s p • 



n=0 



(n) /"in (1) 

oi j" 



^Pqo ' 



.5 ^^00 “■ Pjj ^ 

37^0 



/ VA , fl) % 

( L (pqq‘ s) ) + 

m=0 



. + 



(Pii ) 



n (p.; 

jFi 



( 1 ) 



p.;^^) m=0 

JJ 



VN t (1) 

L (p.. s) 



By comparing coefficients of the corresponding powers of s in this 
expression, we find that 



for n < i 



(n) 



Oi 



( n p. 



1 

£ 

m=0 



(P )" 

^mm 



n (p 



37^- 



mm 



m 



(1) (1) 



for n s i 



The other rows of (p 



(n) 

ij 



are similarly determined, and R :s 

n 



computed by (7) . 

An alternate approach under the present repair policy that might 
be of some interest is as follows; note that for fixed n (n = 0 , 1 , 2 , 
and i(i = 0, 1, ...,k) 






k - i 
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/ \ 

is a mass function, since (p.; ) is a stochastic matr.x. Let 

-J 

( n\ 

denote the random variables having these distributions. Since 



R 

n 



(1 -qo)MPi'">) 




the major task in computing R is to find the elements of the vector 




P (n) k-j 

A " 



p (n) k-j 

^ Pki p 
j=o 



Consider the first component: 



k 

j=0 





k 

P 



k 

L 

) = 0 





j 



k 



P 



k 

P 




) 



where 



t (n) ^ ^ ^ ^ t e ( 0 , 1 ] 

“^0 



is the probability generating function of the random variable J 



(n) 

0 



A recursion relation for the generating functions i|f (t) can 

■^0 



be obtained using the one-step transition probabilities given in (5) 
and (6) together with equation (8) . Thus, 
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■'o 



.‘[pr [<>0^ 

1 = 0 U. 






k 

,i (n) , k ^ /" t x i (m) 

tn L/i ^ ' 



= qo t pg. + (1 -q„)p (-) 



Oi 



^ ‘ = ‘“‘Po'ti['‘-<*o>:'-P 

i“0 



k-(i - 1) 



= % <t) + (1 - q^) p ,tf 



^0 \{m) '■' ■ '* -0' ^ \(m) V P 



(t) 



<* -'>0>‘ [♦ (m)“'' - p‘' ♦,(m) (t) ] 

kJ ^ »J _ 



Starting from 



^ (0) 



j(0) 

= E ( t ° ) = 1 



one can, in theory, compute \jf (t) for successively higher values 

“^0 

of m , Unfortunately, this computation becomes tedious for large m 
values . 

In matrix form, the vector of probability generating functions 



(n) given by 

J . 

1 
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, (n) 

(Pij • ) T = 



r( 



it) 



'I' 

-r(n) 

\ 



where 



T = 



1 

t 

2 

t 




Since a convex combination of probability generating functions is a 
probability generating function, 

P (p . )T = it) 

is a probability generating function. (In fact, is the probability 

generating function of the random variable denoting the state occupied 
after n trials. ) It then follows that 
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= (1 - qj,) p*^ 

Remark. It is easy to incorporate into this consideration a slightly 
more general repair policy, as follows. 

A type II mode is repaired with probability 0 on a given trial, 
given at least one such mode fails on that tr ial. 

In this case, we replace the original one*step transition probability 
matrix by one in which, for i = 0,l,...,k; n=l,2,... 

= P[A |E. i] + P[A &:no repair I E. ] 

= + (1 - qo)p^~' + (1 - qQ-) (1 - d - 0 ) 

p.^ . = P [ & a repair ] 

= (1 -qQ)(i - p^ ^)0 

Of the three approaches to computing discussed for the present 

repair policy, it appears that none is clearly "best" under ail 

circumstances. A choice of which to use would probably depend, at 

least in part, upon factors such as computer availability, size of the 

matrix ) , and the number of R 's to be computed. It is con- 

^ij n 

ceivable that, in some circumstances, the approach consisting of 

( 1 ) 

simply multiplying (p,\ ) by itself the required number of times is 

worth consideration. 
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Let us next consider the following repair policy: at each tr.‘/ 1 



all type II modes that fail are repaired. In this case, the matrix 

( 1 ) 

(p.. ) has elements such that 



p . =0 for m > i 

mi 



(1C) 



Pu“ = P[AJEj^ + (1 - q„)p‘''‘ ; 1= 0. 1. , k (11) 



(1) ,, 1 - I'X 

Pi.i+j = -'>o>( j )p 



j i = 0,l,...,k 



( 12 ) 



With this (pi ^ ) niatrix, one could compute R using the spectral 
decomposition approach discussed above. The generating function 
approaches can also be used, although the computation becomes more 
involved. This is because simple recurrence relations of the form (8) 
under the former repair policy must now be replaced with relations of 
the form 



>*n"’ 

Oi 



(n - 1) (1) 

^Oi Pii 



Pn/ = Pn^ ■ P;; ' + Po ^ P^ V' • + • • 



(n-1) (1) 

'0 , i-1 Pi-1 , i 



(n-1) (1) 

PCO Pqi 



Again, the ’’best'' method to use to calculate R would probably depend 
upon the particular circumstances involved. 

An interesting modification of the repair policy in which all type II 
failures at each stage are corrected is as follows. 

At each stage, each observed type II failure is corrected with 
probability 0 , independent of other failures and the number of failures. 
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m- 






( 1 ) 

In this case, elements of (p^^. > are obtained by rf placing q 

with 0 q in (10) , (11) , and (12) , This rather intuitively obvious state- 
ment may be more rigorously established as follows: 



(1) 



p.'V = P [ A I E. , ] + (1 - 0) 

^11 ^ n| 



* P r one type II mode failure I E. T 

^ ' 1 , n - 1 



+ ... 



, k - i 



+ (1 “ 0 ) P [ k-i type II mode failures | E^^ n 1 ^ 



k-i 






• { (1 - 0 ) q ] 



^0 ^ Ip + ( 1 - 0 ) q ] 



k-i 



qq + (1 - qq ) C 1 - 0 q ] 



k-i 



p. , = P r one type II mode failure & one repair I E. ,] + ••• 

^ 1 , 1+1 ^ I X , n - 1 



+ P [k-i type II mode failures & one repair ( ^ ^ ] 



= ( 1 - qQ ) 0 



|cr) 



j - 1 



(13) 



noting that 
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d (1) 



k-i 



d0 Pii = ^ P 

J=1 



k - i - j /■ k - i 



cr)> 



{ (1 -0)q] ( -q) 



= (l-qQ)(k-i)[p + (l-0)q] 



k - i - 1 



it follows that (13) is equivalent to 



I j = { 1 - q^ ) 0 q (k - i) [ 1 - 0 q ] ^ ^ 



Similarly, it follows that 



V - / ,1 . 0'^ \ ^ ^ i ^ k - i - m 

p^ - ^ tt C m ; p 

m=j ^ ^ 



( 1 ) 

i , i + j 



m (m “1) ... (m ~ j 1) (1 - 0 ) 



m 



= (1 - qq) -|t q^ (k - i) (k - i - 1) ... (k 



• [ p + (1 - 0 ) q 3 



k i - 1 



= (1 “ qQ ) ( 0 q ) ■^ C ^ j 0 ^ ^ ^ ^ ^ 



.k-i 



for > = 0, l,...,k; j = 1,2,..., k-i. 



( - q' 



m 

[ 

- j 



- i - j + 1) 
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4. Model III: k Assignable Cause Modes, Not Necessarily Equally L:*.kely 



Markov chain models for the case in which type II failures are not 
equally likely are equivalent to models in which type II failures are 
equally likely but the repair policy does not treat the failure modes 
’’uniformly”. In what follows, we shall concentrate mostly upon systems 
assumed to have two type II modes (k = 2) in series (see Figure 2) . 



failure 

probability: 





FIGURE 2 



One aspect of Model III which is different from the previous models 
is the identification of ’’states” of the system. For example, suppose 
k = 2 . We may define states as follows: 



State 


Condition 


0 


no type II mode repaired 


1 


mode repaired 


2 


mode II^ repaired 


3 


both type II modes repaired 
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In general, with k type II naodes, there are 2 states of this nature. 

( 1 ) 

Once the corresponding {p_ ) matrix has been obtained, the value of 

is given by 

\ (1 - qg) 3 ) P (14) 

th 

where the j component of the vector P is the conditional probability 
that no type II failures occur, given the system is in state j and a 
type I failure does not occur. 

Let us assume that at each stage all type II failures are (permanently) 
repaired, and consider two example models, each depending upon con- 
ditions imposed on the occurrence of type II failures. Extensions to 
other values of k and other repair policies can be made as in the 
models considered previously. Consider first the case in which it is 
assumed that II^ can fail on a given trial only if both II^ and I do not 
fail. More precisely, assume that 

P [ I fails ] = 

P [ fails I no I failure] - 

P [ II^ fails I no I failure &; no II^ failure] = q^ 

P [ fails I I or fails] = P [ II^ fails | I fails] = 0 

Under these "exclusive occurrence" assumptions, the one-step 
transition matrix is of the form 
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) 



(1) 

^00 


(1) 

Pqi 


'D 

Pq2 


(1) 

P03 


0 


Pll 


0 


(1) 

Pl3 


0 


0 


(1) 

P 22 


(1) 

P 23 


0 


0 


0 


1 



where 



Poo = 'lo ^ n (1 - qj) 



2 

n 

i=0 



PoV = 



02 



(1 -q„) (1 -q,) 






PiV = '’o + ■%> -^z' 



( 1 ) 

Pl3 “ - '!o> 



P22' = “>0 + " - “>0' “ - 'll’ 



P 



( 1 ) 

23 



(1 - 



(15) 



Note: This process can be viewed as a wa-lk on the plane or as a network, 



as is suggested in Figure 3. 



- 31 




FIGURE ^ 



Next, consider the case in which the type II modes are independent. 

Let 

P [ I fails ] = 

P [ II^ fails I no I failure] - 

P [ II^ fails I no I failure ] = 

P [II fails & II_ fails I no 1 failure] = q q 
1 Z ' 1 Z 

assuming neither type II mode is repaired. In this case, the matrix 
(p//^) is of the form given in (15), with entries as before except 
that 
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(The fact that 



,( 1 ) 

01 



- (1 - qo) (1 - q^) q^ 



03 



= (1 






is no longer zero allows passage along the dotted 
paths of Figure 3. ) Also, note that in this case the vector P of (14) 
is given by 



P = 



(1 - ) (1 - q ^) 



(1 - ) 



L 



(1 - q, 



J 



In both of these examples and, in general for other values of k, 

( 

the computation of (p_ ) in Model III can be accomplished using the 

generating function approach or the spectral decomposition approach. 
The probability generating function method no longer appUes, however, 
because of the form of the vector P , 
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5. Summary 



In viewing reliability growth prediction models as Markov chains, 
it is seen that the computation of the reliability after n trials and 
possible associated repairs, , may be accomplished with any of 

several different methods. A class of models is considered which 
accommodates variations in several important factors such as the 
interdependencies of assignable cause failure modes, inclusion of an 
inherent failure mode, the repair policy, and the distribution of initial 
states of the system. 
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